Symantec Managed PKI Service Deployment Options

Save this PDF as:
 WORD  PNG  TXT  JPG

Size: px
Start display at page:

Download "Symantec Managed PKI Service Deployment Options"

Transcription

1 WHITE PAPER: SYMANTEC MANAGED PKI SERVICE DEPLOYMENT OPTIONS Symantec Managed PKI Service Deployment Options Who should read this paper This whitepaper explains some of the Symantec Managed PKI Service enterprise deployment options based on an organization's current enterprise identity management methods, application requirements, and staff capabilities; that are available to simplify or scale an enterprise's certificate lifecycle management process. It also covers the key features of the Symantec PKI Client, which when deployed provides an improved user experience for end-user applications.

2

3 Content Introduction Symantec Managed PKI Service Key Features Enterprise Deployment Modes Symantec Managed PKI Enrollment Options Enrollment Options How to Choose an Enrollment Method Symantec PKI Client Software Selecting a the Right Certificate Enrollment Method and Lifecycle Want to Try Before you Buy?

4 Introduction Public Key Infrastructure (PKI) is a combination of hardware, software, facilities, people, policies, and processes. It can be leveraged to create, manage, store, distribute, and revoke digital certificates. Digital certificates provide a simple, stable, scalable, and highly secure method of authenticating devices and users. Symantec Managed PKI Service is a managed service offering that allows organizations to outsource their infrastructure for managing digital certificates and leverage the best-practices and high availability of an expertly run certificate lifecycle platform. This whitepaper explains some of the Managed PKI Service enterprise deployment options that are available to simplify or scale your enterprise's certificate lifecycle management process. This paper also covers the key features of Symantec PKI Client, which can be deployed to provide an improved user experience for end-user applications. Symantec Managed PKI Service Managed PKI provides a full-featured solution equivalent to any on-premise PKI system with additional features and benefits, including a global validation, twenty-four hours a day, seven days a week, 365 days a year monitoring, high availability operations, and full disaster recovery. Built on Symantec s proven, globally managed, highly reliable infrastructure, Symantec Managed PKI Service reduces the cost and complexity associated with in-house PKI and focuses enterprises on delivering solutions, instead of infrastructure. It alleviates the burden of planning, building, and maintaining a PKI, while allowing enterprises to maintain internal control over digital certificate issuance, suspension, and revocation. Depending on your current enterprise identity management methods, application requirements, and the capabilities of your staff, you may opt to manage all certificate related user information entirely in the Symantec PKI service, or integrate Managed PKI with your existing Active Directory and Domain services. The following information will guide you through your options to help you make these decisions. 1.1 Key Features Broad, cross-platform client support for certificate-based applications including Windows, Mac, ios, Android, or any standards-based browser client Supports authentication, encryption, digital signing, access control, and non-repudiation certificates out-of-the-box with flexible settings Public root of trust and certificate validation services Templatized certificate format provisioning for common applications such as VPNs, x WiFi, Web applications, Secure S/MIME , and Adobe CDS Web-based dashboard with on-demand and scheduled reports Simplified and automated certificate lifecycle management capabilities Flexible identity management options, either 100 percent in the cloud, or through an on-premise gateway to Active Directory Auto-configuration capabilities for ios clients or through Symantec PKI Client for Windows, Mac, or Android devices 1

5 1.2 Enterprise Deployment Modes Organizations deploying a Symantec Managed PKI solution can choose a solely cloud-based identity management solution for simplicity, or deploy on-premise components to enable enterprise directory integration and automation. The available options are as follows: Cloud deployment In the cloud scenario, an enterprise can manage users directly in the cloud through Symantec PKI Manager. Users can be managed through bulk operations as well as individually. The cloud service has a pass code distribution mechanism for authenticating the users before issuing certificates Hybrid enterprise deployment through Symantec PKI Enterprise Gateway The hybrid enterprise mode takes advantage of a PKI Enterprise Gateway (EGW) to provide corporate directory integration, where the EGW effectively acts as a proxy for the cloud-based service. This allows certificate metadata to be automatically populated, and certificates can be directly published in the corporate directory. The PKI EGW also acts as local Registration Authority and integrates with Hardware Security Modules to protect key material. The diagram below illustrates the hybrid deployment mode: Symantec Managed PKI Enrollment Options Certificate lifecycle management is a policy-based process. Each organization using Symantec Managed PKI Service has its own management objectives and therefore defines its own policies, such as the type of certificates they issues, the method of distributing certificates, and so on. Typically, as a best practice, certificates are issued with a finite lifespan as defined by policy. When a certificate expires, if the choice is made to renew, a new certificate will be issued. Thus, the certificate management process is a lifecycle process. 2

6 The figure below illustrates the various processes within the certificate management lifecycle: 2.1 Enrollment Options After global account policies have been defined, the enroll and approve processes are the first steps toward defining certificate policies and issuing certificates. Symantec Managed PKI provides three distinct options for the enroll category. Within the provisioning for the chosen enrollment option are policies that will affect the enable, use, and renew options of the certificate s lifecycle. At a high level the three enrollment options are: Native browser enrollment The native browser enrollment requires no software to be installed on the end user s computer, and works in both cloud and hybrid scenarios. Enrollment is performed through a Web interface available in either Firefox or Internet Explorer (IE); Web interfaces are continuously being added Microsoft auto-enroll client Auto-enrollment using Microsoft auto-enroll client requires an Enterprise Gateway to be installed on-premise, and therefore works only for hybrid scenarios. Enrollment is performed through the Microsoft auto-enrollment client distributed with the various versions of Windows; users will be automatically enrolled through their domain credentials Enrollment using Symantec PKI Client PKI Client is available for both cloud and hybrid scenarios, supports both Windows and Mac operating systems, and provides several lifecycle management functions as well as security policies that are not available with the other enrollment options. This does come at the cost of having to initially distribute software. However, once software is installed on an end user's computer the software automatically keeps itself current through Symantec s Live Update technology. Auto-enrollment is also supported by PKI Client. Auto-enrollment requires an Enterprise Gateway be installed on-premise so therefore works only for the hybrid scenario. Manual enrollment is performed through a Web 3

7 interface available in either Firefox or IE; browsers are continuously being added. Once enrolled, the certificate lifecycle is managed by the client through automatic renewals. 2.2 How to Choose an Enrollment Method When choosing an enrollment method, an organization must balance their requirements for security, usability, and scale. The method which is the most broadly supported across client platforms is browser-based enrollment. However, this method puts some of the enrollment processes in the hands of the end user. The most automated enrollment method makes the enrollment and client configuration process all but invisible to the end user. This is accomplished by utilizing either Symantec PKI Client software, or specialized built-in client capabilities such as ios Simple Certificate Enrollment Protocol (SCEP)-based enrollment. A feature comparison of the three Managed PKI enrollment options is provided below to help select the best enrollment method for users. In each row, the enrollment option that best supports that particular feature is highlighted. 4

8 As the highlights in the table illustrate, the PKI Client is the preferred option for most categories. This resonates well with the vision behind Managed PKI, which in short is to revolutionize the digital certificate experience with dramatic enhancements in flexibility and usability; PKI Client is an integral part of this vision. The next section will look at some of the PKI Client differentiating features in detail. 2.3 Symantec PKI Client Software PKI Client can issue and automatically renew Symantec Managed PKI software and hardware certificates for a simplified user experience that works across various Web browsers. This section describes some of the key features of PKI Client Streamlined PKI lifecycle management PKI Client offers a uniform enrollment experience regardless of the browser that is used for enrollment. The certificate store is also browser agnostic, meaning the user can enroll in Firefox and have the certificate available for usage in IE. PKI Client supports auto-enrollment, where end users automatically have certificates installed based on their domain credentials. One of the main issues facing enterprises is renewal of certificates before they expire. Symantec PKI Client automatically renews certificates that are not PIN-protected, and will ask the user to renew PIN-protected certificates well before they expiration date Centralized policy management for security and convenience Policies dictating how credentials are secured on the client, such as user PIN and export policies, can be configured for PKI Client through PKI Manager. Policy also allows the enterprise to control which physical store to use for the certificates that are enrolled. This option is important in terms of ensuring that high security certificates, such as a smart card or USB token, end up in the appropriate store. Friendly names for certificates can also be set through policy (as well as customized by the user), and provide the user a more recognizable credential for authentication. Furthermore, policy can dictate whether to remove certificates from the user s certificate store on renewal. This feature ensures that in scenarios where users do have to select between certificates, only relevant certificates show up in the list presented to the user Post-processing framework After a certificate is enrolled on an end user s computer, it is still necessary for the user to configure the certificate for usage with their applications. To simplify the end user experience, PKI Client offers a post-processing framework that automatically takes care of the application configuration. The framework can also be extended to perform custom configurations. The following applications are supported by the post-processing framework out of the box: Juniper VPN Client Cisco VPN client Check Point VPN client Outlook 2007 and 2010 Installation of root/intermediate certificates for IE and Firefox Install PKCS#11 module in Firefox (basically exposing the enrolled certificate in Firefox) Publish S/MIME encryption certificate to the user attribute in Active Directory for cloud scenarios Configure WiFi connections for Microsoft WiFi client 5

9 2.3.4 PKI Client use cases Studies have shown that PKI deployments are most successful when the certificates are made transparent to the user; so that end users are not required to make technical choices regarding certificates. Through the PKI Client integration with the Symantec Managed PKI Service and the post-processing framework, the certificate experience can largely be hidden from the end user. Example use cases supported by the Symantec PKI Client include: WiFi PKI certificates for enterprise users authenticated through Active Directory credentials: One simple PKI enrollment flow with very few clicks for ENROLL, APPROVE, and ENABLE: Enroll the certificate using a Web interface Authenticate the user with active directory credentials through Enterprise Gateway The certificate is enabled for WiFi automatically by PKI Client USE: no action required from user to authenticate to a WiFi network RENEW: no action required from user, PKI Client will automatically renew the certificate and delete the expired certificate from the client computer SSL client authentication for enterprise Web site using Active Directory: One simple PKI enrollment flow with very few clicks for ENROLL, APPROVE, and ENABLE: Enroll the certificate using a Web interface Authenticate the user with Active Directory credentials through Enterprise Gateway Enable the certificate for client authentication in both Firefox and IE USE: one click to choose the certificate identified by a friendly name RENEW: no action required from user, PKI Client will automatically renew the certificate and delete the expired certificate from the client computer Certificate management console The end user will be able to perform the following operations using the certificate management console provided by PKI Client console: Change PIN for a device Manually renew certificates Export certificates Import certificates View diagnostics information to help troubleshooting See a list of certificates on their system Be able to view certificate details of individual certificates Delete individual certificates Erase all certificates from a device 6

10 2.3.6 PKI Client support matrix The table below provides the support matrix for PKI Client: 7

11 Selecting a the Right Certificate Enrollment Method and Lifecycle The decision tree below highlights a few common questions an administrator should ask regarding their PKI deployment, along with the recommended enrollment methods: 1. Approve Users - The first path concerns whether the end user base is internal or external. If the end users are external (for example, partners), they are most likely not in an Active Directory infrastructure within the organization, and would need to be managed through the Symantec cloud infrastructure. 2. Manage Users - Assuming the end-user base is internal, the enterprise has a choice of whether to manage users through the cloud, or install an Enterprise Gateway, which can perform authentication directly against an Active Directory infrastructure. 3. Enroll - If the enterprise has chosen to deploy an Enterprise Gateway, the next question is whether to automatically enroll users. If automatic enrollment is desired to simplify the enrollment experience, the administrator can configure the auto-enrollment service that is installed as part of the Enterprise Gateway. This will take advantage of the Microsoft auto-enrollment client. 4. Use Software 4a) Assuming auto-enrollment is not a requirement, the next question is whether to deploy PKI Client. The client can easily be pushed out to end user's computers through standard Microsoft group policy installation. 4b) Similar to 4a) above, but for cloud deployments, the enterprise must decide whether to deploy PKI Client. The difference in this scenario is that since the external customer's computers may not be available in a domain, the software distribution would be more complicated and Native enrollment may be preferred. 8

12 Want to Try Before you Buy? More information can be found about Symantec Managed PKI Service on the web: A free trial of Symantec Managed PKI Service is also available: The trial is full featured and includes all the Symantec Manager PKI deployment options, ranging from a fully cloud-based deployment to a hybrid Enterprise Gateway deployment. The trial is limited to 90 days and up to 100 users. 9

13

14 About Symantec Symantec protects the world s information, and is a global leader in security, backup, and availability solutions. Our innovative products and services protect people and information in any environment from the smallest mobile device, to the enterprise data center, to cloud-based systems. Our worldrenowned expertise in protecting data, identities, and interactions gives our customers confidence in a connected world. More information is available at or by connecting with Symantec at go.symantec.com/socialmedia. For specific country offices and contact numbers, please visit our website. Symantec World Headquarters 350 Ellis St.<br/>Mountain View, CA USA<br/>+1 (650) <br/>1 (800) <br/> Copyright 2012 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, and the Checkmark Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. 7/

Why Digital Certificates Are Essential for Managing Mobile Devices

Why Digital Certificates Are Essential for Managing Mobile Devices WHITE PAPER: WHY CERTIFICATES ARE ESSENTIAL FOR MANAGING........... MOBILE....... DEVICES...................... Why Digital Certificates Are Essential for Managing Mobile Devices Who should read this paper

More information

Symantec App Center. Mobile Application Management and Protection. Data Sheet: Mobile Security and Management

Symantec App Center. Mobile Application Management and Protection. Data Sheet: Mobile Security and Management Mobile Application Management and Protection Data Sheet: Mobile Security and Management Overview provides integrated mobile application and device management capabilities for enterprise IT to ensure data

More information

Entrust Managed Services PKI. Getting an end-user Entrust certificate using Entrust Authority Administration Services. Document issue: 2.

Entrust Managed Services PKI. Getting an end-user Entrust certificate using Entrust Authority Administration Services. Document issue: 2. Entrust Managed Services PKI Getting an end-user Entrust certificate using Entrust Authority Administration Services Document issue: 2.0 Date of issue: June 2009 Revision information Table 1: Revisions

More information

Comparing Cost of Ownership: Symantec Managed PKI Service vs. On- Premise Software

Comparing Cost of Ownership: Symantec Managed PKI Service vs. On- Premise Software WHITE PAPER: COMPARING TCO: SYMANTEC MANAGED PKI SERVICE........ VS..... ON-PREMISE........... SOFTWARE................. Comparing Cost of Ownership: Symantec Managed PKI Service vs. On- Premise Software

More information

Meeting Mobile and BYOD Security Challenges

Meeting Mobile and BYOD Security Challenges WHITE PAPER: MEETING MOBILE AND BYOD SECURITY CHALLENGES........................................ Meeting Mobile and BYOD Security Challenges Who should read this paper This white paper is written for enterprise

More information

Symantec Mobile Management 7.2

Symantec Mobile Management 7.2 Scalable, secure, and integrated device management Data Sheet: Endpoint Management and Mobility Overview The rapid proliferation of mobile devices in the workplace is outpacing that of any previous technology

More information

Symantec Client Management Suite 7.6 powered by Altiris technology

Symantec Client Management Suite 7.6 powered by Altiris technology Symantec Client Management Suite 7.6 powered by Altiris technology IT flexibility. User freedom. Data Sheet: Endpoint Management Overview With so many new devices coming into the workplace and users often

More information

Using Entrust certificates with VPN

Using Entrust certificates with VPN Entrust Managed Services PKI Using Entrust certificates with VPN Document issue: 1.0 Date of issue: May 2009 Copyright 2009 Entrust. All rights reserved. Entrust is a trademark or a registered trademark

More information

Symantec Mobile Management for Configuration Manager 7.2

Symantec Mobile Management for Configuration Manager 7.2 Symantec Mobile Management for Configuration Manager 7.2 Scalable, Secure, and Integrated Device Management Data Sheet: Endpoint Management and Mobility Overview The rapid proliferation of mobile devices

More information

Two-Factor Authentication

Two-Factor Authentication WHITE PAPER: TWO-FACTOR AUTHENTICATION: A TCO VIEWPOINT........................................ Two-Factor Authentication Who should read this paper This whitepaper is directed at IT, Security, and Compliance

More information

Enterprise Cloud Backup and Recovery with Symantec NetBackup

Enterprise Cloud Backup and Recovery with Symantec NetBackup Enterprise Cloud Backup and Recovery with Symantec NetBackup Data Sheet: Backup and Disaster Recovery Overview of Symantec NetBackup As the established market leader, Symantec NetBackup delivers reliable

More information

Card Management System Integration Made Easy: Tools for Enrollment and Management of Certificates. September 2006

Card Management System Integration Made Easy: Tools for Enrollment and Management of Certificates. September 2006 Card Management System Integration Made Easy: Tools for Enrollment and Management of Certificates September 2006 Copyright 2006 Entrust. All rights reserved. www.entrust.com Entrust is a registered trademark

More information

Managed Services PKI 60-day Trial Quick Start Guide

Managed Services PKI 60-day Trial Quick Start Guide Entrust Managed Services PKI Managed Services PKI 60-day Trial Quick Start Guide Document issue: 3.0 Date of issue: Nov 2011 Copyright 2011 Entrust. All rights reserved. Entrust is a trademark or a registered

More information

Symantec Encryption Solutions for Email, Powered by PGP Technology

Symantec Encryption Solutions for Email, Powered by PGP Technology Symantec Encryption Solutions for Email, Powered by PGP Technology Data Sheet: Encryption The Problem with Email Are you worried that users are emailing sensitive information openly? According to Osterman

More information

Technical Certificates Overview

Technical Certificates Overview Technical Certificates Overview Version 8.2 Mobile Service Manager Legal Notice This document, as well as all accompanying documents for this product, is published by Good Technology Corporation ( Good

More information

Securing Microsoft Exchange 2010 With VeriSign Authentication Services

Securing Microsoft Exchange 2010 With VeriSign Authentication Services BUSINESS GUIDE: SECURING MICROSOFT EXCHANGE 2010 WITH VERISIGN AUTHENTICATION SERVICES Symantec Business Guide Securing Microsoft Exchange 2010 With VeriSign Authentication Services Best Practices for

More information

Securing Microsoft Exchange 2010 with Symantec SSL Certificates

Securing Microsoft Exchange 2010 with Symantec SSL Certificates BUSINESS GUIDE: SECURING MICROSOFT EXCHANGE 2010 WITH SYMANTEC SSL CERTIFICATES Symantec Business Guide Securing Microsoft Exchange 2010 with Symantec SSL Certificates Best Practices for Securing Your

More information

Authentication Solutions. Versatile And Innovative Authentication Solutions To Secure And Enable Your Business

Authentication Solutions. Versatile And Innovative Authentication Solutions To Secure And Enable Your Business Authentication Solutions Versatile And Innovative Authentication Solutions To Secure And Enable Your Business SafeNet Strong Authentication and Transaction Verification Solutions The Upward Spiral of Cybercrime

More information

Is online backup right for your business? Eight reasons to consider protecting your data with a hybrid backup solution

Is online backup right for your business? Eight reasons to consider protecting your data with a hybrid backup solution PARTNER BRIEF: IS ONLINE BACKUP RIGHT FOR YOUR BUSINESS?........................................ Is online backup right for your business? Eight reasons to consider protecting your data with a hybrid Who

More information

An Overview of Samsung KNOX Active Directory and Group Policy Features

An Overview of Samsung KNOX Active Directory and Group Policy Features C E N T R I F Y W H I T E P A P E R. N O V E M B E R 2013 An Overview of Samsung KNOX Active Directory and Group Policy Features Abstract Samsung KNOX is a set of business-focused enhancements to the Android

More information

Endpoint Protection Small Business Edition 2013?

Endpoint Protection Small Business Edition 2013? Symantec Endpoint Protection Small Business Edition 2013 Customer FAQ FAQ: Endpoint Security What is Symantec Endpoint Protection Small Business Edition 2013? is a new solution that offers simple, fast,

More information

Simplify SSL Certificate Management Across the Enterprise

Simplify SSL Certificate Management Across the Enterprise WHITE PAPER White Paper Simplify SSL Certificate Management Across the Enterprise Simplify SSL Certificate Management Across the Enterprise Contents introduction 1 A Platform for Single-Point Control and

More information

Athena Mobile Device Management from Symantec

Athena Mobile Device Management from Symantec Athena Mobile Device Management from Symantec Scalable, Secure, and Integrated Device Management for ios and Android Data Sheet: Endpoint Management and Mobility Overview The rapid proliferation of mobile

More information

FAQ: ECC and DSA Certificates Website Security Solutions. Frequently Asked Questions

FAQ: ECC and DSA Certificates Website Security Solutions. Frequently Asked Questions Frequently Asked Questions FAQ: ECC and DSA Certificates ECC and DSA Certificates CONTENTS Q1: What is DSA?... 3 Q2: What is ECC?... 3 Q3: Which type of certificate will make my web server faster?... 3

More information

WHITEPAPER. SECUREAUTH 2-FACTOR AS A SERVICE 2FaaS

WHITEPAPER. SECUREAUTH 2-FACTOR AS A SERVICE 2FaaS WHITEPAPER SECUREAUTH 2-FACTOR AS A SERVICE 2FaaS EXECUTIVE OVERVIEW 2-Factor as a Service (2FaaS) is a 100% cloud-hosted authentication solution that offers flexible security without compromising user

More information

Authentication Solutions Buyer's Guide

Authentication Solutions Buyer's Guide WHITE PAPER: AUTHENTICATION SOLUTIONS BUYER'S GUIDE........................................ Authentication Solutions Buyer's Guide Who should read this paper Individuals who would like more details regarding

More information

Symantec Mobile Management Suite

Symantec Mobile Management Suite Symantec Mobile Management Suite One Solution For All Enterprise Mobility Needs Data Sheet: Mobile Security and Management Introduction Most enterprises have multiple mobile initiatives spread across the

More information

Symantec Enterprise Vault for Microsoft Exchange

Symantec Enterprise Vault for Microsoft Exchange Symantec Enterprise Vault for Microsoft Exchange Store, manage, and discover critical business information Data Sheet: Archiving Trusted and proven email archiving Symantec Enterprise Vault, the industry

More information

ADDING STRONGER AUTHENTICATION for VPN Access Control

ADDING STRONGER AUTHENTICATION for VPN Access Control ADDING STRONGER AUTHENTICATION for VPN Access Control Adding Stronger Authentication for VPN Access Control 1 ADDING STRONGER AUTHENTICATION for VPN Access Control A VIRTUAL PRIVATE NETWORK (VPN) allows

More information

How to Provide Secure Single Sign-On and Identity-Based Access Control for Cloud Applications

How to Provide Secure Single Sign-On and Identity-Based Access Control for Cloud Applications SOLUTION BRIEF: PROTECTING ACCESS TO THE CLOUD........................................ How to Provide Secure Single Sign-On and Identity-Based Access Control for Cloud Applications Who should read this

More information

Symantec Backup Exec.cloud

Symantec Backup Exec.cloud Automatic, continuous, and secure protection that backs up data to the cloud, or via a hybrid approach combining on-premise and cloud-based backup. Data Sheet: Symantec.cloud Only 21 percent of SMBs are

More information

White Paper. Simplify SSL Certificate Management Across the Enterprise

White Paper. Simplify SSL Certificate Management Across the Enterprise WHITE PAPER: SIMPLIFY SSL CERTIFICATE MANAGEMENT ACROSS THE ENTERPRISE White Paper Simplify SSL Certificate Management Across the Enterprise Simplify SSL Certificate Management Across the Enterprise Contents

More information

Symantec Mobile Management 7.1

Symantec Mobile Management 7.1 Scalable, secure, and integrated device management Data Sheet: Endpoint Management and Mobility Overview The rapid proliferation of mobile devices in the workplace is outpacing that of any previous technology,

More information

Symantec Messaging Gateway 10.5

Symantec Messaging Gateway 10.5 Powerful email gateway protection Data Sheet: Messaging Security Overview Symantec Messaging Gateway enables organizations to secure their email and productivity infrastructure with effective and accurate

More information

Simplify Your Windows Server Migration

Simplify Your Windows Server Migration SOLUTION BRIEF: ENDPOINT MANAGEMENT........................................ Simplify Your Windows Server Migration Who should read this paper Windows Server 2003 customers looking to migrate to the latest

More information

Authentication Solutions VERSATILE AND INNOVATIVE AUTHENTICATION SOLUTIONS TO SECURE AND ENABLE YOUR BUSINESS

Authentication Solutions VERSATILE AND INNOVATIVE AUTHENTICATION SOLUTIONS TO SECURE AND ENABLE YOUR BUSINESS Authentication Solutions VERSATILE AND INNOVATIVE AUTHENTICATION SOLUTIONS TO SECURE AND ENABLE YOUR BUSINESS SafeNet Strong Authentication and Transaction Verification Solutions The Upward Spiral of Cybercrime

More information

Symantec Mobile Security

Symantec Mobile Security Advanced threat protection for mobile devices Data Sheet: Endpoint Management and Mobility Overview The combination of uncurated app stores, platform openness, and sizeable marketshare, make the Android

More information

Symantec NetBackup 7.5 What s New and Version Comparison Matrix

Symantec NetBackup 7.5 What s New and Version Comparison Matrix Symantec NetBackup 7.5 What s New and Version Comparison Matrix Solution Overview: Data Protection While backup takes many forms, recovery shouldn t. Symantec NetBackup with V-Ray technology is the single

More information

Cisco Mobile Collaboration Management Service

Cisco Mobile Collaboration Management Service Cisco Mobile Collaboration Management Service Cisco Collaboration Services Business is increasingly taking place on both personal and company-provided smartphones and tablets. As a result, IT leaders are

More information

Symantec Managed PKI for SSL Support Overview. How to get quick and convenient customer support

Symantec Managed PKI for SSL Support Overview. How to get quick and convenient customer support WHITE PAPER: SYMANTEC MANAGED PKI FOR SSL SUPPORT OVERVIEW Symantec Managed PKI for SSL Support Overview How to get quick and convenient customer support Symantec Managed PKI for SSL Support Overview CONTENTS

More information

Copyright 2012 Trend Micro Incorporated. All rights reserved.

Copyright 2012 Trend Micro Incorporated. All rights reserved. Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme files,

More information

How to Unlock Agility by Backing up to, from, and in the Cloud

How to Unlock Agility by Backing up to, from, and in the Cloud WHITE PAPER: HOW TO UNLOCK AGILITY BY BACKING UP TO, FROM,....... AND.... IN.. THE.... CLOUD....................... How to Unlock Agility by Backing up to, from, and in the Cloud Who should read this paper

More information

How Endpoint Encryption Works

How Endpoint Encryption Works WHITE PAPER: HOW ENDPOINT ENCRYPTION WORKS........................................ How Endpoint Encryption Works Who should read this paper Security and IT administrators Content Introduction to Endpoint

More information

Managed Public Key Infrastructure

Managed Public Key Infrastructure WHITE PAPER: MANAGED PUBLIC KEY INFRASTRUCTURE........................................ Managed Public Key Infrastructure Who should read this paper To operate business-critical applications over the Internet,

More information

BlackBerry Enterprise Service 10. Universal Device Service Version: 10.2. Administration Guide

BlackBerry Enterprise Service 10. Universal Device Service Version: 10.2. Administration Guide BlackBerry Enterprise Service 10 Universal Service Version: 10.2 Administration Guide Published: 2015-02-24 SWD-20150223125016631 Contents 1 Introduction...9 About this guide...10 What is BlackBerry

More information

GlobalSign Integration Guide

GlobalSign Integration Guide GlobalSign Integration Guide GlobalSign Enterprise PKI (EPKI) and AirWatch Enterprise MDM 1 v.1.1 Table of Contents Table of Contents... 2 Introduction... 3 GlobalSign Enterprise PKI (EPKI)... 3 Partner

More information

ipad in Business Security

ipad in Business Security ipad in Business Security Device protection Strong passcodes Passcode expiration Passcode reuse history Maximum failed attempts Over-the-air passcode enforcement Progressive passcode timeout Data security

More information

Symantec Mobile Management 7.1

Symantec Mobile Management 7.1 Scalable, secure, and integrated device management for healthcare Data Sheet: Industry Perspectives Healthcare Overview The rapid proliferation of mobile devices in the workplace is outpacing that of any

More information

SYMANTEC ENDPOINT PROTECTION SMALL BUSINESS EDITION

SYMANTEC ENDPOINT PROTECTION SMALL BUSINESS EDITION SYMANTEC ENDPOINT PROTECTION SMALL BUSINESS EDITION Frequently Asked Questions WHAT IS SYMANTEC ENDPOINT PROTECTION SMALL BUSINESS EDITION 1? Symantec Endpoint Protection Small Business Edition is built

More information

How to Configure Certificate Based Authentication for WorxMail and XenMobile 10

How to Configure Certificate Based Authentication for WorxMail and XenMobile 10 How to Configure Certificate Based Authentication for WorxMail and XenMobile 10 This article describes how to configure certificate based authentication using Microsoft Certificate Services (PKI) for WorxMail

More information

White Paper. Anywhere, Any Device File Access with IT in Control. Enterprise File Serving 2.0

White Paper. Anywhere, Any Device File Access with IT in Control. Enterprise File Serving 2.0 White Paper Enterprise File Serving 2.0 Anywhere, Any Device File Access with IT in Control Like it or not, cloud- based file sharing services have opened up a new world of mobile file access and collaborative

More information

Symantec Backup Exec 2012 Licensing Guide

Symantec Backup Exec 2012 Licensing Guide REPORT: SYMANTEC BACKUP EXEC 2012 LICENSING GUIDE........................................ Symantec Backup Exec 2012 Licensing Guide Who should read this paper Use this guide to learn how to license Symantec

More information

Private Cloud Services

Private Cloud Services TECHNICAL WHITE PAPER: BACKUP EXEC TM 2014 PRIVATE CLOUD SERVICES Backup Exec TM 2014 Technical White Paper Private Cloud Services Technical White Papers are designed to introduce Symantec partners and

More information

MaaS360 On-Premises Cloud Extender

MaaS360 On-Premises Cloud Extender MaaS360 On-Premises Cloud Extender Installation Guide Copyright 2014 Fiberlink Communications Corporation. All rights reserved. Information in this document is subject to change without notice. The software

More information

Protect Identities for people, workstations, mobiles, networks

Protect Identities for people, workstations, mobiles, networks ot Corporate ID Protect Identities for people, workstations, mobiles, networks Address your security needs with the leader in the corporate identity market Corporate security challenges The security of

More information

How Drive Encryption Works

How Drive Encryption Works WHITE PAPER: HOW DRIVE ENCRYPTION WORKS........................................ How Drive Encryption Works Who should read this paper Security and IT administrators Content Introduction to Drive Encryption.........................................................................................

More information

MCTS Guide to Configuring Microsoft Windows Server 2008 Active Directory. Chapter 11: Active Directory Certificate Services

MCTS Guide to Configuring Microsoft Windows Server 2008 Active Directory. Chapter 11: Active Directory Certificate Services MCTS Guide to Configuring Microsoft Windows Server 2008 Active Directory Chapter 11: Active Directory Certificate Services Objectives Describe the components of a PKI system Deploy the Active Directory

More information

Deploying iphone and ipad Security Overview

Deploying iphone and ipad Security Overview Deploying iphone and ipad Security Overview ios, the operating system at the core of iphone and ipad, is built upon layers of security. This enables iphone and ipad to securely access corporate services

More information

Course 6426: Configuring and Troubleshooting Identity & Access Solutions With Windows Server 2008 Active Directory Page 1 of 6

Course 6426: Configuring and Troubleshooting Identity & Access Solutions With Windows Server 2008 Active Directory Page 1 of 6 2008 Active Directory Page 1 of 6 Configuring and Troubleshooting Identity and Access Solutions with Windows Server 2008 Active Directory Course 6426: 2 days; Instructor-Led Introduction This instructor-led

More information

Symantec Enterprise Vault.cloud Overview

Symantec Enterprise Vault.cloud Overview Fact Sheet: Archiving and ediscovery Introduction The data explosion that has burdened corporations and governments across the globe for the past decade has become increasingly expensive and difficult

More information

Symantec Enterprise Vault for Microsoft Exchange

Symantec Enterprise Vault for Microsoft Exchange Symantec Enterprise Vault for Microsoft Exchange Store, manage, and discover critical business information Data Sheet: Archiving Trusted and proven email archiving Symantec Enterprise Vault, the industry

More information

PROTECTED CLOUDS: Symantec solutions for consuming, building, or extending into the cloud

PROTECTED CLOUDS: Symantec solutions for consuming, building, or extending into the cloud PROTECTED CLOUDS: Symantec solutions for consuming, building, or extending into the cloud Blue skies ahead? Yes if you are protected when you move to the cloud. Lately, it seems as if every enterprise

More information

Learn More Cloud Extender Requirements Cheat Sheet

Learn More Cloud Extender Requirements Cheat Sheet Learn More Cloud Extender Requirements Cheat Sheet Overview This document defines all requirements to ensure a successful installation of the MaaS360 Cloud Extender to enable use of ActiveSync Manager

More information

Symantec Client Management Suite 8.0

Symantec Client Management Suite 8.0 IT Flexibility. User Freedom. Data Sheet: Endpoint Management Overview of Symantec Client Management Suite Symantec Client Management Suite automates time-consuming and redundant tasks for deploying, managing,

More information

Entrust Authority Administration Services 7.2 Overview

Entrust Authority Administration Services 7.2 Overview Overview November, 2006 Copyright 2006 Entrust. Entrust is a registered trademark of Entrust, Inc. in the United States and certain other countries. All other Entrust product names and service names are

More information

Enterprise Vault Whitepaper Move Archive Feature Overview

Enterprise Vault Whitepaper Move Archive Feature Overview Enterprise Vault Whitepaper Move Archive Feature Overview This document provides an overview of the Enterprise Vault Move Archive feature This document applies to the following version(s) of :

More information

Symantec Sealed Program Guide

Symantec Sealed Program Guide SOLUTION BRIEF: SYMANTEC SEALED PROGRAM GUIDE........................................ Symantec Sealed Program Guide Who should read this paper The purpose of this document is to define the program, outline

More information

Don't Wait Until It's Too Late: Choose Next-Generation Backup to Protect Your Business from Disaster

Don't Wait Until It's Too Late: Choose Next-Generation Backup to Protect Your Business from Disaster WHITE PAPER: DON'T WAIT UNTIL IT'S TOO LATE: CHOOSE NEXT-GENERATION................. BACKUP........ TO... PROTECT............ Don't Wait Until It's Too Late: Choose Next-Generation Backup to Protect Your

More information

Oracle Identity Management Concepts and Architecture. An Oracle White Paper December 2003

Oracle Identity Management Concepts and Architecture. An Oracle White Paper December 2003 Oracle Identity Management Concepts and Architecture An Oracle White Paper December 2003 Oracle Identity Management Concepts and Architecture Introduction... 3 Identity management... 3 What is Identity

More information

Ensuring the security of your mobile business intelligence

Ensuring the security of your mobile business intelligence IBM Software Business Analytics Cognos Business Intelligence Ensuring the security of your mobile business intelligence 2 Ensuring the security of your mobile business intelligence Contents 2 Executive

More information

A Symantec Connect Document. A Total Cost of Ownership Viewpoint

A Symantec Connect Document. A Total Cost of Ownership Viewpoint A Symantec Connect Document Two-Factor Authentication A Total Cost of Ownership Viewpoint White Paper: Two-Factor Authentication: A TCO Viewpoint Two-Factor Authentication Contents Introduction............................................................................................

More information

Apps. Devices. Users. Data. Deploying and managing applications across platforms is difficult.

Apps. Devices. Users. Data. Deploying and managing applications across platforms is difficult. Users Devices Apps Data Users expect to be able to work in any location and have access to all their work resources. The explosion of devices is eroding the standards-based approach to corporate IT. Deploying

More information

Symantec Endpoint Protection 12.1.4

Symantec Endpoint Protection 12.1.4 Data Sheet: Endpoint Security Overview provides unrivaled security across physical and virtual platforms and support for the latest operating systems-mac OS X 10.9 and Windows 8.1. Powered by Symantec

More information

http://docs.trendmicro.com

http://docs.trendmicro.com Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the product, please review the readme files,

More information

GE Healthcare. Centricity 360. Case Exchange service. Unleash the power of cloud to bring your distributed care teams together.

GE Healthcare. Centricity 360. Case Exchange service. Unleash the power of cloud to bring your distributed care teams together. GE Healthcare Centricity 360 Case Exchange service Unleash the power of cloud to bring your distributed care teams together. Centricity 360 Case Exchange streamlines clinical collaboration with unaffiliated

More information

KNOWLEDGE SOLUTIONS. M Designing and Managing a Windows Public Key Infrastructure 4 Day Course

KNOWLEDGE SOLUTIONS. M Designing and Managing a Windows Public Key Infrastructure 4 Day Course Module 1: Overview of Public Key Infrastructure This module explains the basic concepts of a public key infrastructure (PKI) and its components. It also provides an overview of the topics that will be

More information

MaaS360 Cloud Extender

MaaS360 Cloud Extender MaaS360 Cloud Extender Installation Guide Copyright 2013 Fiberlink Communications Corporation. All rights reserved. Information in this document is subject to change without notice. The software described

More information

What We Do: Simplify Enterprise Mobility

What We Do: Simplify Enterprise Mobility What We Do: Simplify Enterprise Mobility AirWatch by VMware is the global leader in enterprise-grade mobility solutions across every device, every operating system and every mobile deployment. Our scalable

More information

Endpoint Management and Mobility Solutions from Symantec. Adapting traditional IT operations for new end-user environments

Endpoint Management and Mobility Solutions from Symantec. Adapting traditional IT operations for new end-user environments Endpoint Management and Mobility Solutions from Symantec Adapting traditional IT operations for new end-user environments During the past few years the traditional concept of end-user computing has drastically

More information

Symantec Enterprise Vault for Microsoft Exchange Server

Symantec Enterprise Vault for Microsoft Exchange Server Symantec Enterprise Vault for Microsoft Exchange Server Store, manage, and discover critical business information Data Sheet: Archiving Trusted and proven email archiving performance and users can enjoy

More information

Managing SSL Security in Multi-Server Environments

Managing SSL Security in Multi-Server Environments Managing SSL Security in Multi-Server Environments VeriSign s Easy-to-Use Web-Based Services Speed SSL Certificate Management and Cuts Total Cost of Security CONTENTS + A Smart Strategy for Managing SSL

More information

Cloud Storage Backup for Storage as a Service with AT&T

Cloud Storage Backup for Storage as a Service with AT&T WHITE PAPER: CLOUD STORAGE BACKUP FOR STORAGE AS A SERVICE........ WITH..... AT&T........................... Cloud Storage Backup for Storage as a Service with AT&T Who should read this paper Customers,

More information

An Overview of Samsung KNOX Active Directory-based Single Sign-On

An Overview of Samsung KNOX Active Directory-based Single Sign-On C E N T R I F Y W H I T E P A P E R. S E P T E M B E R 2013 An Overview of Samsung KNOX Active Directory-based Single Sign-On Abstract Samsung KNOX is a set of business-focused enhancements to the Android

More information

Symantec Endpoint Protection 12.1.2

Symantec Endpoint Protection 12.1.2 Data Sheet: Endpoint Security Overview offers comprehensive defense against complex attacks for both physical and virtual environments. It integrates ten essential security technologies in a single, high

More information

Administration Guide. BlackBerry Enterprise Service 12. Version 12.0

Administration Guide. BlackBerry Enterprise Service 12. Version 12.0 Administration Guide BlackBerry Enterprise Service 12 Version 12.0 Published: 2015-01-16 SWD-20150116150104141 Contents Introduction... 9 About this guide...10 What is BES12?...11 Key features of BES12...

More information

Turnkey Deduplication Solution for the Enterprise

Turnkey Deduplication Solution for the Enterprise Symantec NetBackup 5000 Appliance Turnkey Deduplication Solution for the Enterprise Mayur Dewaikar Sr. Product Manager, Information Management Group White Paper: A Deduplication Appliance Solution for

More information

Closing the Vulnerability Gap of Third- Party Patching

Closing the Vulnerability Gap of Third- Party Patching SOLUTION BRIEF: THIRD-PARTY PATCH MANAGEMENT........................................ Closing the Vulnerability Gap of Third- Party Patching Who should read this paper IT Managers who are trying to manage

More information

ENTRUST CLOUD. SSL Digital Certificates, Discovery & Management +1-888-690-2424. entrust@entrust.com entrust.com

ENTRUST CLOUD. SSL Digital Certificates, Discovery & Management +1-888-690-2424. entrust@entrust.com entrust.com ENTRUST CLOUD SSL Digital Certificates, Discovery & Management +1-888-690-2424 entrust@entrust.com entrust.com Entrust Cloud SSL Digital Certificates, Discovery & Management Digital certificates have emerged

More information

Symantec Asset Management Suite 7.5 powered by Altiris technology

Symantec Asset Management Suite 7.5 powered by Altiris technology Symantec Asset Management Suite 7.5 powered by Altiris technology Take control of your assets, ensure compliance, and uncover savings Data Sheet: Endpoint Management Are you paying for unused software

More information

Business Case for Voltage SecureMail Mobile Edition

Business Case for Voltage SecureMail Mobile Edition WHITE PAPER Business Case for Voltage SecureMail Mobile Edition Introduction Mobile devices such as smartphones and tablets have become mainstream business productivity tools with email playing a central

More information

Frequently Asked Questions. Frequently Asked Questions: Securing the Future of Trust on the Internet

Frequently Asked Questions. Frequently Asked Questions: Securing the Future of Trust on the Internet FREQUENTLY ASKED QUESTIONS: SECURING THE FUTURE OF TRUST ON THE INTERNET Frequently Asked Questions Frequently Asked Questions: Securing the Future of Trust on the Internet Securing the Future of Trust

More information

Baltimore UniCERT. www.baltimore.com. the world s leading PKI. global e security

Baltimore UniCERT. www.baltimore.com. the world s leading PKI. global e security TM the world s leading PKI www.baltimore.com global e security Bringing Real Business On-Line The Internet is now forming a key part of organizations operating strategy. Although most companies accept

More information

Symantec Managed PKI Service for Windows Service Description

Symantec Managed PKI Service for Windows Service Description Introduction Symantec Managed PKI Service for Windows Service Description Symantec Managed PKI Service for Windows provides a flexible PKI platform to manage complete lifecycle of certificates, which includes:

More information

Best Practices for Running Symantec Endpoint Protection 12.1 on the Microsoft Azure Platform

Best Practices for Running Symantec Endpoint Protection 12.1 on the Microsoft Azure Platform TECHNICAL BRIEF: BEST PRACTICES GUIDE FOR RUNNING SEP ON.... AZURE.................................... Best Practices for Running Symantec Endpoint Protection 12.1 on the Microsoft Azure Platform Who should

More information

How much do you pay for your PKI solution?

How much do you pay for your PKI solution? Information Paper Understand the total cost of your PKI How much do you pay for your PKI? A closer look into the real costs associated with building and running your own Public Key Infrastructure and 3SKey.

More information

Secure, Centralized, Simple

Secure, Centralized, Simple Whitepaper Secure, Centralized, Simple Multi-platform Enterprise Mobility Management 2 Controlling it all from one place BlackBerry Enterprise Service 10 (BES10) is a unified, multi-platform, device, application,

More information

Deploying and Managing a Public Key Infrastructure

Deploying and Managing a Public Key Infrastructure Deploying and Managing a Public Key Infrastructure 2821: Deploying and Managing a Public Key Infrastructure (4 Days) About this Course This four-day, instructor-led course provides students with the knowledge

More information

Exchange 2010 PKI Configuration Guide

Exchange 2010 PKI Configuration Guide Exchange 2010 PKI Configuration Guide Overview 1. Summary 2. Environment 3. Configuration a) Active Directory Configuration b) CA Configuration c) Exchange Server IIS Configuration d) Exchange Configuration

More information

nexus Hybrid Access Gateway

nexus Hybrid Access Gateway Product Sheet nexus Hybrid Access Gateway nexus Hybrid Access Gateway nexus Hybrid Access Gateway uses the inherent simplicity of virtual appliances to create matchless security, even beyond the boundaries

More information

PKI Uncovered. Cisco Press. Andre Karamanian Srinivas Tenneti Francois Dessart. 800 East 96th Street. Indianapolis, IN 46240

PKI Uncovered. Cisco Press. Andre Karamanian Srinivas Tenneti Francois Dessart. 800 East 96th Street. Indianapolis, IN 46240 PKI Uncovered Andre Karamanian Srinivas Tenneti Francois Dessart Cisco Press 800 East 96th Street Indianapolis, IN 46240 Contents Introduction XIII Part I Core Concepts Chapter 1 Crypto Refresh 1 Confidentiality,

More information